Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/k7tJBlJcXuJaeEOmdbvooHSbSck.roa
File: k7tJBlJcXuJaeEOmdbvooHSbSck.roa (raw, json)
Hash identifier: oPxokdKbQ+BjF1pa9AcxNVClsmUYo2Nmt2yoCO9R9SU=
Subject key identifier: 93:BB:49:06:52:5C:5E:E2:5A:78:43:A6:75:BB:E8:A0:74:9B:49:C9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833C1ED5DF38EF4DDAFCB50656E6BAA3B1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/k7tJBlJcXuJaeEOmdbvooHSbSck.roa
Signing time: Wed 14 Sep 2022 13:09:57 +0000
ROA not before: Wed 14 Sep 2022 13:09:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204474
IP address blocks: 2a06:a005:1cf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:1e:d5:df:38:ef:4d:da:fc:b5:06:56:e6:ba:a3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 14 13:09:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93bb4906525c5ee25a7843a675bbe8a0749b49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:e2:85:64:b9:82:0c:51:96:6e:30:82:e2:
f5:d1:8d:c1:ef:dd:c4:b5:83:17:d1:08:41:15:14:
3d:2e:a7:9b:3d:02:86:dd:94:8e:7e:bd:54:4d:9c:
5e:75:7e:a9:83:00:38:aa:ba:dd:d1:ae:5e:b9:fe:
58:2a:a0:49:a4:4d:21:42:bd:5c:9e:59:9c:f8:a6:
43:c9:30:05:32:35:e1:44:97:2e:45:4c:43:6b:df:
75:85:18:44:38:71:d5:b7:25:26:3c:60:58:4d:be:
94:ca:b0:de:bb:fc:33:a6:71:5b:5e:78:e6:bf:a4:
03:31:2f:80:10:d3:bd:f0:9f:1f:26:a8:d9:81:48:
d8:24:f8:f1:cb:e3:8a:04:4d:2d:8a:95:82:5d:a9:
af:7a:a4:ab:ba:0d:b5:9e:c4:7d:59:16:13:15:d9:
d6:6b:6a:d0:2d:0a:29:4e:6e:da:7b:73:48:b9:56:
86:eb:9c:51:8e:2e:0a:35:b3:b2:b7:6f:25:94:86:
54:89:20:9e:d1:ab:5c:ce:a7:c3:d4:9a:40:1a:7f:
0d:7b:76:36:e4:40:10:9d:b7:de:e1:b0:5d:75:8f:
16:83:e8:47:14:74:48:4f:1f:d5:55:27:d7:34:8d:
1a:aa:47:2f:83:7e:cd:25:1c:09:ec:e6:06:d3:3b:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:49:06:52:5C:5E:E2:5A:78:43:A6:75:BB:E8:A0:74:9B:49:C9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/k7tJBlJcXuJaeEOmdbvooHSbSck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1cf0::/44
Signature Algorithm: sha256WithRSAEncryption
66:f7:53:cc:7b:08:d5:72:b7:ef:e3:85:ac:71:88:e6:2a:05:
f4:11:e0:8b:4d:41:4f:4f:04:fc:30:a6:05:27:c3:68:08:8d:
a7:98:7c:db:eb:f7:83:00:f4:86:48:db:6f:16:5d:6d:84:c6:
3e:45:a7:68:c9:e8:ed:d1:df:06:5f:15:41:e4:8b:b6:a3:58:
1f:ab:90:b7:17:fc:72:e5:27:8a:44:a7:17:5e:a1:8f:22:cc:
75:2c:9f:99:df:e7:42:c9:de:89:fb:83:c1:5f:26:3a:11:6b:
64:d7:99:09:be:d2:4c:8e:19:49:54:6c:f9:13:c7:14:70:ab:
c7:86:07:f5:8d:5c:5f:53:7b:9e:a9:ce:6e:2d:e0:16:55:0c:
84:8e:59:d7:cf:c6:98:73:dd:2e:0c:b2:a4:d4:5b:db:b6:24:
39:6b:41:4c:30:2c:de:60:62:71:cc:af:39:f0:2c:d4:28:51:
99:71:4f:8c:5b:f6:22:ce:1e:fa:f1:0d:33:bf:43:77:20:73:
9b:2b:d8:5f:17:30:54:d2:a8:43:65:9b:e0:5f:3b:28:f4:2e:
89:61:38:8b:3b:6b:65:cd:00:75:44:d8:77:ba:e1:d1:8e:c7:
b2:76:a3:39:f2:cc:ac:13:22:4e:9f:09:61:58:8d:a1:00:4e:
26:f2:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:06 2025 by rpki-client